Main

type

5 (blog/news article)

status

21 (imported old-v2, waiting for another import)

review version

0

cleanup version

0

pending deletion

0 (-)

created at

2025-05-30 10:00:30

updated at

2026-01-14 17:01:48

Address

url

https://news.sophos.com/en-us/2025/01/16/gootloader-inside-out/

url length

63

url crc

21354

url crc32

2487964522

location type

1 (url matches target location, page_location is empty)

canonical status

10 (verified canonical url)

canonical page id

-

Source

domain id

89412088

domain tld

0

domain parts

0

originating warc id

-

originating url

https://news.sophos.com/en-us/2025/01/16/gootloader-inside-out/?amp=1

source type

10 (canonical url)

Server response

server ip

192.0.66.227

Publication date

2025-07-17 05:32:07

Fetch attempts

1

Original html size

142991

Normalized and saved size

107016

Content

title

Gootloader inside out

excerpt

content

The Gootloader malware family uses a distinctive form of social engineering to infect computers: Its creators lure people to visit compromised, legitimate WordPress websites using hijacked Google search results, present the visitors to these sites with a simulated online message board, and link to the malware from a simulated “conversation” where a fake visitor asks a fake site admin the exact question that the victim was searching for an answer to. Most of the infection process is driven by code that runs on the compromised WordPress server  and another server we have previously named “the mothership” that orchestrates an elaborate and complex dance to dynamically produce a page that seemingly answers the exact question you’re asking. Gootloader’s operators make behind the scenes, almost unnoticeable changes to the compromised WordPress sites that cause those sites to load the extra content from the moth...

author

updated

1769820666

Text analysis

block type

0

extracted fields

233

extracted bits

featured image
title
full content
content was extracted heuristically
OpenGraph suggests this is an article

detected location

0

detected language

1 (English)

category id

-

index version

1

paywall score

0

spam phrases

0

Text statistics

text nonlatin

0

text cyrillic

0

text characters

25692

text words

5033

text unique words

1297

text lines

1

text sentences

147

text paragraphs

1

text words per sentence

34

text matched phrases

0

text matched dictionaries

0